mbuf trash-related "memory modified after free" panic fixed.

[Daniel Collins]

Mike,

I'm still seeing these printfs.  Much like Pascal, my "value" is fairly 
consistent.  It does seem to change based on access point...  I've 
tested this on three different access points-- 2 open, and 1 with 
WPA-PSK.  When I connect to the open access points, I get "val=102c0de". 
  When connecting to the WPA-PSK access point, I get "val=2cc0de".  This 
value is consistent across kernel rebuilds and connect sessions.

My hardware is a Thinkpad 380XD w/ Belkin F5D7010 (ral) pc card nic.

Let me know if I can provide more information.

Thanks,
Daniel Collins
dan.collins at acm.org

# wpa_supplicant -i ral0 -c /etc/wpa_supplicant.conf -B
(time passes)
# dhclient ral0
This memory last freed by: c05f2767
Memory modified after free 0xc12b9300(256) val=2cc0de @ 0xc12b93bc
DHCPREQUEST...

# addr2line -e kernel.debug 0xc05f2767
../../../kern/uipc_mbuf.c:167 (m_free() call in m_freem())